Splunk Enterprise 6.2 was first released to customers on October 28, 2014.

Planning to upgrade from an earlier version?

If you plan to upgrade from an earlier version of Splunk Enterprise to version 6.2, read "How to upgrade Splunk Enterprise" in the Installation Manual for important information you need to know before you upgrade.

Search head clustering

Search head clusters are groups of Splunk Enterprise search heads that serve as a central resource for searching. You can run or access the same searches, dashboards, knowledge objects, and so on, from any member of the cluster. This feature is designed to provide horizontal scaling, high availability, and no single point of failure.

Getting data in

This release features completely remodeled pages and wizard-like workflows for adding data. The new Data Preview feature makes it easier to create the right sourcetype for your data, and the new Forwarder Inputs feature allows you to push input configurations to Splunk Enterprise deployment clients.

Advanced field extractor

The advanced field extractor allows you to create custom fields in Splunk Enterprise. This feature allows you to select fields in events and automatically generate a regular expression that captures the fields.

App key value store

The app key value store enables developers to build rich applications by providing a way to store and retrieve data for use in the operation of an app, such as state data. The app key value store provides both a REST API for full read/write operations and direct access to data via the Splunk Enterprise search pipeline.

Event pattern detection

Splunk Enterprise 6.2 can analyze your data for patterns of common events. Run a search and click on the Patterns tab to review a list of the top event patterns in the search dataset. You can see the estimated number of events associated with each pattern and run a new search that returns events matching a selected pattern. You can save patterns as event types and alerts.

Instant pivot

In past releases, to create tables and charts based on search results, you needed to run a search that included transforming commands like stats or timechart. With instant pivot, you can now run a non-transforming search and then open the search in Pivot. From there, you can create tables and charts that reflect the data returned by the search. When you are finished you can save your Pivot creations as reports or dashboard panels.

Home page redesign

Splunk Enterprise 6.2 introduces a redesigned home page. The new design moves Apps into a scrollable list on the left side of the page and creates space for a user-specific dashboard in the center of the page. A collapsible panel at the top of the page provides helpful links for getting started with Splunk Enterprise.

Prebuilt panels

You can now create customized panels to share among various dashboards. This is useful to create a personalized dashboard for a group of users. It is also useful to make a commonly used search and visualization readily available to other dashboards.

You can share a prebuilt panel from the same app, a different app, or from a different user.

For more information, in the Dashboards and Visualizations manual see:

Post-process searches

If your dashboard contains panels that run similar searches, you can save search resources by creating a base search for the dashboard. Panels in the dashboard can use a post-process search to further modify the results of a base search. The base search can be a global search for the dashboard or any other search within the dashboard.

Updated API parameter descriptions

New documentation

Splunk Enterprise 6.2 introduces a new manual:

The Capacity Planning Manual provides high-level guidance on how to plan resource capacity for a Splunk Enterprise deployment and helps you decide when to add resources and distribute Splunk Enterprise services to maintain performance.

Comments

Rmorlen, you can see the list of changes at http://docs.splunk.com/Documentation/Splunk/latest/ReleaseNotes/6.2.1.

Andrewb splunk

January 23, 2015

Is there a list of bug fixes from 6.2 to 6.2.1?

Rmorlen

January 23, 2015

Davidschmidt, Splunk Enterprise 6.2.1 fixes an issue with Windows installation failures on non-English language systems. This version was released on December 16, 2014 and is available for download from http://www.splunk.com/download.

Andrewb splunk

December 20, 2014

When will there be a Fix for German OS in this Version?

Davidschmidt

December 19, 2014

Please list how many 6.2.0 bugs are fixed in 6.2.1 release and what are not fixed.

Jayannah

December 16, 2014

Dfronck, SPL-82244 has not yet been fixed. We've added it back to Known Issues. Also, we've added a related issue, 90958.

Vgenovese

November 7, 2014

There isn't much information about what was fixed in 6.2. Specifically, is SPL-82244 - Unexpected duplicate app: _cluster fixed in 6.2?

Dfronck

November 5, 2014

Jabad, we do not have a single topic at this time that summarizes all of the UI changes in version 6.2. "Meet Splunk Web" (http://docs.splunk.com/Documentation/Splunk/6.2.0/Admin/WhatsSplunkWeb) provides an overview of the new Home page. Other UI changes related to new features like the distributed management console, advanced field extractor, event pattern detection, and so on are detailed in the documentation for those respective features.

Enter your email address, and someone from the documentation team will respond to you:

Send me a copy of this feedback

Please provide your comments here. Ask a question or make a suggestion.

Feedback submitted, thanks!

You must be logged into splunk.com in order to post comments.
Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic.
If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk,
consider posting a question to Splunkbase Answers.

0
out of 1000 Characters

Your Comment Has Been Posted Above

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website.
Learn more (including how to update your settings) here »